CVE-2017-10928

CVE-2017-10928 describes a heap-based buffer over-read vulnerability in ImageMagick versions 7.0.6-0. This flaw, located in the GetNextToken function, can be triggered by a specially crafted SVG document processed by the GetUserSpaceCoordinateValue function. With a CVSS score of 8.8 (High), this vulnerability allows remote attackers to obtain sensitive information from process memory or potentially achieve other unspecified impacts, requiring user interaction. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.